[SECURITY] Fedora 16 Update: xulrunner-6.0-1.fc16

XULRunner is a Mozilla runtime package that can be used to bootstrap XUL+XP COM applications that are as rich as Firefox and Thunderbird. It provides mecha nisms for installing, upgrading, and uninstalling these applications. XULRunner a lso provides libxul, a solution which allows the embedding ...

Unfixed XSS vulnerability at calc.m0hi1.com

Security researcher Sony, has submitted on 15/08/2011 a cross-site-scripting XSS vulnerability affecting calc.m0hi1.com, which at the time of submission ranked 12736290 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currently...

PT-2011-3908

Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 1.6.4 Description The issue allows remote attackers to inject arbitrary web script or HTML via various components, including 1 the com contact component, as demonstrated by the Itemid parameter to "index.php"; 2 the c...

PT-2011-4037

Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 1.7.0 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved through the URI to "includes/application.php", reachable through "index.php". Additionally, when using...

科讯 6.x - 7.06 SQL 注射漏洞

简要描述： 详细说明： Author:my5t3ry 转载请注明：t00ls.net 漏洞位于注册页面的\User\Reg\RegAjax.asp 中的24 - 46行 和 254 -270 行 代码如下： Class AjaxCheck Private KS Private Sub ClassInitialize Set KS=New PublicCls End Sub Private Sub ClassTerminate Set KS=Nothing End Sub Public Sub Kesion Select Case KS.S"Action" Case...

VSS issue: Retrieving the COM class factory for component with CLSID failed (80070005)

Veeam service account does not have enough privileges to call a COM server application with specified CLSID. As a result, it is not possible to inject the VSS short-life process into the guest OS...

An application-specific permission settings prevent COM Server application from running locally

The nworks discovery is not working and topology is not created. User does not get ‘SVDISC’ messages, but they get the following message instead: "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID and APPID to the user NT...

Alphabit Online SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Unfixed XSS vulnerability at www.welcomesk8.com

Security researcher AR3SW0RMED, has submitted on 30/06/2011 a cross-site-scripting XSS vulnerability affecting www.welcomesk8.com, which at the time of submission ranked 382085 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/12/2011. It is...

High-speed Ankang School Site program v3. 1. 1 cookie injection vulnerability-vulnerability warning-the black bar safety net

PS:seems to be oyaya kernel. Use the system notes: 1. The present program consists of extreme well-being and development,the symbolic charge a little Fee for everyone to use! 2. The present system for sharing procedures,the user the freedom to choose whether to use,in use, any problems and losses...

eHub (cart.php) SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Quram Blins SQL-i Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Misronline SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

AIX 530011 : U840830

The remote host is missing AIX PTF U840830 which is related to the security of the package devices.pci.df1000f7.com You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...

AIX 530011 : U840822

The remote host is missing AIX PTF U840822 which is related to the security of the package devices.pci.77102224.com You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...

AIX 530011 : U840856

The remote host is missing AIX PTF U840856 which is related to the security of the package devices.pci.4f111100.com You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...

AIX 530012 : U841204

The remote host is missing AIX PTF U841204 which is related to the security of the package devices.pci.77102224.com You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...

AIX 530012 : U841195

The remote host is missing AIX PTF U841195 which is related to the security of the package devices.pci.4f111100.com You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...

Unfixed XSS vulnerability at daleel.roro44.com

Security researcher s4udi-j0k3r, has submitted on 13/06/2011 a cross-site-scripting XSS vulnerability affecting daleel.roro44.com, which at the time of submission ranked 3938 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/01/2012. It is...

ICE Innovation => SQL injection vulnerability

Exploit for php platform in category web applications ============================================================ Title: ICE Innovation =SQL injection vulnerability Date:10/6/11 Author: Sideswipe Home: www.pro2leet.net or www.alboraaq.com or www.indishell.in Category: Web apps Dork: intext:"Desi...